I-Linux Kernel kanye ne-Qualcomm Adreno GPU Zero-Day Vulnerabilities: A Deep Dive

I-Linux Kernel kanye ne-Qualcomm Adreno GPU Zero-Day Vulnerabilities: A Deep Dive

I-Linux kernel kanye ne-Qualcomm Adreno GPU zisanda kuthintwa ubungozi obubalulekile bosuku oluyiziro, okuyi-Dirty Frag kanye namaphutha amathathu kubashayeli be-Adreno GPU. Lobu bungozi budala ubungozi obukhulu bokuvikeleka, njengoba bungasetshenziswa ukuze bathole ukufinyelela okunqunyiwe kwezimpande ekusatshalalisweni okuningi kwe-Linux futhi kulimaze amadivayisi e-Android.

I-Dirty Frag: I-Linux Kernel Zero-Day Vulnerability

I-Dirty Frag iyingozi ye-Linux kernel evumela abasebenzisi abangenalo ilungelo ukuthi bathole ukufinyelela okunqunyiwe kwezimpande ekusatshalalisweni okuningi kweLinux. Ukuba sengozini kubangelwa iphutha ekuphatheni kwe-kernel amaphakethe ahlukanisiwe, angasetshenziswa ukuze kusetshenziswe ikhodi engafanele enamalungelo aphakeme. Njengoba ukudalulwa kuka-Hyunwoo Kim kuchaza, ukuba sengozini kuthinta izinguqulo ze-Linux kernel 5.10 nakamuva. Lokhu kuba sengcupheni kuphathelene ikakhulukazi ngoba kungasetshenziswa ukuze kutholwe ukufinyelela kwezimpande, okungaholela ekufinyeleleni okungagunyaziwe kudatha ebucayi namasistimu.

💡 Okuthathayo Okungukhiye: I-Dirty Frag iwukuba sengcupheni okubalulekile okudinga ukunakwa okusheshayo kochwepheshe bezobuchwepheshe ukuze bapeyishe futhi bavikele amasistimu abo. Ukuba sengozini kungase kusetshenziswe ukuze kutholwe ukufinyelela kwezimpande, okungaholela ekufinyeleleni okungagunyaziwe kudatha ebucayi namasistimu. Ukuze unciphise lobu sengozini, abasebenzisi be-Linux bangasebenzisa isichibi esinikezwe umphakathi we-Linux kernel, elungisa iphutha ekuphatheni kwe-kernel yamaphakethe ahlukene futhi ivimbele ukuxhashazwa.

# Isibonelo sendlela yokusebenzisa isichibi se-Dirty Frag usebenzisa i-Git
git ukulanda https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
git cherry-pick -x <patch_hash>

Ukwengeza, abasebenzisi bangamisa amasistimu abo ukuthi asebenzise isiqukathi namabhokisi esandbox e-microVM, anganikeza isendlalelo esengeziwe sokuvikela ngokumelene nokuba sengozini kwe-kernel. Lokhu kungenxa yokuthi isiqukathi kanye nama-sandbox e-microVM angakwazi ukuhlukanisa i-kernel kuyo yonke isistimu, avimbele ukuxhashazwa kokuba sengozini.

I-Qualcomm Adreno GPU Zero-Day Flaws

I-Qualcomm ibhekane nobungozi obuthathu bosuku oluyiziro kumashayeli ayo e-Adreno GPU, axhashazwa ekuhlaselweni okuqondiwe kumadivayisi e-Android. Ubungozi buthinta ukuphatha komshayeli we-Adreno GPU ukwabiwa kwenkumbulo futhi kungaxhashazwa ukuze kufakwe ikhodi engafanele enamalungelo aphakeme. Ngokusho kwesaziso sezokuphepha se-Qualcomm, ubungozi buthinta izinguqulo zomshayeli we-Adreno GPU 540 nakamuva.

⚠️ Ingcuphe Yezakhiwo: Amaphutha e-Qualcomm Adreno GPU osuku oluyiziro agqamisa ukubaluleka kokugcina abashayeli bedivayisi benolwazi lwakamuva kanye nokuvikela ngokumelene nezinto ezingaba khona zokuxhaphaza. Ukwehluleka ukwenza kanjalo kungaholela ekufinyeleleni okungagunyaziwe kudatha ebucayi namasistimu. Ukuze kuncishiswe lobu bungozi, abasebenzisi be-Android bangabuyekeza amadivayisi abo abe yinguqulo yakamuva yesofthiwe, ehlanganisa umshayeli we-Adreno GPU ocishiwe.

# Isibonelo sendlela yokumisa i-boot evikelekile kudivayisi ye-Android
idivayisi:
  secure_boot: kuyiqiniso
  verified_boot: kuyiqiniso

Ukuqhathaniswa Kwamasu Okunciphisa

Ithebula elilandelayo liqhathanisa amasu okunciphisa I-Dirty Frag kanye ne-Qualcomm Adreno GPU yokuba sengozini yosuku oluyiziro:

Ukunciphisa Nokuvimbela

Ukuze uvimbele ukuxhashazwa kwalokhu kuba sengozini, abasebenzisi kufanele basebenzise amapeshi, balungiselele izindlela zokuqalisa ezivikelekile, futhi basebenzise isiqukathi namabhokisi esandbox e-microVM. Ngokuthatha lezi zinyathelo, abasebenzisi bangavimbela ukuxhashazwa kobungozi futhi bavikele amasistimu nedatha yabo. Kubalulekile futhi ukugcina izishayeli zedivayisi zisesikhathini samanje futhi zivikelekile ezintweni ezingase zibe khona.

Imithombo

• I-Dirty Frag: a kernel zero-day vs. container and microVM sandboxes — Ingxoxo mayelana nokuba sengozini kwe-Dirty Frag kanye nemithelela yako.
• Ibhulethini Yokuphepha ye-Qualcomm — Uhlu lwemininingwane yezokuvikela nezeluleko zemikhiqizo ye-Qualcomm, okuhlanganisa nomshayeli we-Adreno GPU.
• Izingobo Zomlando Ze-Linux Kernel — Inqolobane yekhodi yomthombo we-Linux kernel namapeshi.
• Izinqamuleli Zokuvikeleka ze-Android — Uhlu lwamanqamu wezokuphepha nezeluleko zamadivayisi e-Android.